Senior Security Solutions Engineer

Swimlane is a rapidly growing, innovative startup that provides cloud-scale, low-code security automation for organizations of all industries and sizes. Our technology is relied upon by major security-forward companies around the globe and we are consistently rated as the #1 trusted low-code security automation platform. Our mission is to prevent breaches and enable

continuous compliance via a low-code security automation platform that serves as the system of record for the entire security organization.

Get an understanding of Swimlane here:

What’s the best thing about working at Swimlane? If you ask the team, they'll tell you it's the people. Swimlaners are innovative, collaborative and driven by the purpose of revolutionizing the way security teams automate and respond to alerts. Headquartered in beautiful Louisville, Colorado, directly between Denver and Boulder, Swimlane's staff spans 16 countries!

Reports to:

Content Engineering Manager

We are hiring a senior builder to design, ship, and sustain security solutions and reusable components on Swimlane Turbine, published to the Swimlane Marketplace. This is not a platform-engineering role and not a pre-sales role. You will turn real SOC and managed-service workflows into productized automation: playbooks, components, case experiences, and dashboards that any enterprise or MSSP can install, configure, and run.

The people who do this well have already lived the problem — building security workflows inside a large-enterprise SOC or an MSP/MSSP, then encoding that judgment into automation others can trust.

• Solutions — end-to-end Turbine packages for high-value use cases (SIEM/EDR alert triage, phishing, vulnerability operations, identity response, threat intel, case management).
• Components — reusable ingestion and enrichment building blocks with clean interfaces, so playbooks compose instead of being rewritten per vendor.
• . Marketplace quality — versioned, documented, tested content that deploys cleanly across tenants.

• Translate SOC and MSP operating models into Turbine playbooks, components, apps, and dashboards that are customer-agnostic and configurable.
• . Design workflows that mix deterministic automation with AI-assisted steps — enrichment, summarization, classification — with explicit human-in-the-loop controls.
• . Integrate across the security stack via connectors and APIs: SIEM, EDR/XDR, identity, threat intel, ticketing, and cloud security tools.
• Package, version, and publish Solutions and Components to the Marketplace; own docs, test cases, and release notes.
• Partner with Product, UX, Platform, QA, Sales Engineering, and Professional Services to turn field demand into content that scales.
• Raise the bar on content quality: reuse, testability, failure handling, and operability at enterprise and multi-tenant scale.

• 7+ years in software development, solutions architecture, or security automation — with hands-on time building SOC or IR workflows, not only writing code next to a security team.
• Direct experience in a large-enterprise SOC or an MSP / MSSP, including triage, investigation, enrichment, escalation, and response.
• Hands‑on work on at least one SOAR or security automation platform:
  Swimlane, Cortex XSOAR, Splunk SOAR, Tines, Torq, or equivalent.
• Working knowledge of SIEM and EDR/XDR (for example Splunk, Microsoft Sentinel, Crowd Strike, Defender, Sentinel One) and how analysts actually use them..
• Comfort with ambiguity: you can take an incomplete use case, define the workflow, and ship a maintainable solution.
• Clear written and verbal communication with both engineers and security operators.

• Prior Swimlane Turbine, Marketplace, or…